4 ms·

> Fairphone provides very poor updates much worse than iPhone, Pixel, Samsung flagship or many other devices. They lag far behind partial backports of security

by gib444 1mo ago

> Fairphone provides very poor updates much worse than iPhone, Pixel, Samsung flagship or many other devices. They lag far behind partial backports of security patches to older releases of Android. They lag a year or more behind full security patches which are not all backported to older Android releases, similarly to iOS. How can we verify all those claims?

singing_tartly 1mo ago
Easy to see they don't have Android 17 yet on their website so cannot get all security patches. The claimed patch level is about a month late. Search online and see reports updates slow down cause they're busy. Maybe newer phones get faster updates for a year then slow down to every few months. I found that by googling. Found a post on the FP forum. FP4 was released with support for 5 years but SoC was only going to be supported for 2 more years so no firmware updates for 3 of them. idk why you ask GOS these questions. They know their stuff and shouldnt have to do research for people like a LLM. I didn't know and used Google and found enough to believe what they say.
- grapheneos 1mo ago
  They lag 1-2 months behind the Android Security Bulletins which are months behind when patches can first be shipped by vendors. Verifying their kernels for the FP5 and earlier are end-of-life can be done by looking at the code. It's straightforward to verify they're a year or more behind on major updates and that those are required for full security patches. It's clear from a basic glance at the Android Security Bulletins that Low and Moderate severity patches are not backported. It's harder to demonstrate they don't backport all High and Critical severity patches but it's true and the gap of what's not backported is growing with recent changes. They made an announcement to OEMs about only the most recent 2 major yearly versions getting most High and Critical severity backports along with even those no longer getting a large portion of High and Critical internally found bugs which were found with LLMs.
- gib444 29d ago
  > idk why you ask GOS these questions It's called a discussion forum. This isn't GOS' personal press release website. They can use their own website for that. > They know their stuff They can link to sources then to show their confidence, as any decent academic would do

by gib444 1mo ago

singing_tartly 1mo ago

Easy to see they don't have Android 17 yet on their website so cannot get all security patches. The claimed patch level is about a month late. Search online and see reports updates slow down cause they're busy. Maybe newer phones get faster updates for a year then slow down to every few months. I found that by googling. Found a post on the FP forum. FP4 was released with support for 5 years but SoC was only going to be supported for 2 more years so no firmware updates for 3 of them. idk why you ask GOS these questions. They know their stuff and shouldnt have to do research for people like a LLM. I didn't know and used Google and found enough to believe what they say.

grapheneos 1mo ago
They lag 1-2 months behind the Android Security Bulletins which are months behind when patches can first be shipped by vendors. Verifying their kernels for the FP5 and earlier are end-of-life can be done by looking at the code. It's straightforward to verify they're a year or more behind on major updates and that those are required for full security patches. It's clear from a basic glance at the Android Security Bulletins that Low and Moderate severity patches are not backported. It's harder to demonstrate they don't backport all High and Critical severity patches but it's true and the gap of what's not backported is growing with recent changes. They made an announcement to OEMs about only the most recent 2 major yearly versions getting most High and Critical severity backports along with even those no longer getting a large portion of High and Critical internally found bugs which were found with LLMs.
gib444 29d ago
> idk why you ask GOS these questions It's called a discussion forum. This isn't GOS' personal press release website. They can use their own website for that. > They know their stuff They can link to sources then to show their confidence, as any decent academic would do